Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mode causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
🚨 CVE-2026-7139 — CVSS 9.8/10 ██████████ A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiAclRules of the... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/2uQeoZH6wU
Post summary
A critical flaw (CVSS 9.8) was discovered in the Totolink A8000RU router's setWiFiAclRules functionality; a vendor patch has been released.
CVE-2026-7139 A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Han… https://www.cve.org/CVERecord?id=CVE-2026-7139
Post summary
A flaw has been discovered in the setWiFiAclRules function of /cgi-bin/cstecgi.cgi on the Totolink A8000RU router, with no PoC, exploit, or patch details provided.